Uninitialized Value Vulnerability in Linux Kernel's ext4 Filesystem by The Linux Foundation

CVE-2022-50546

What is CVE-2022-50546?

A vulnerability in the Linux kernel's ext4 filesystem has been found where an uninitialized value may be accessed, leading to potential data integrity issues. This occurs in the function ext4_evict_inode, specifically when newly allocated inodes are handled improperly. If an inode creation process fails before it sets certain flags, unsanitized values can be accessed later, resulting in undefined behavior. Patches have been applied to initialize inode flags to prevent such occurrences, ensuring safer memory management and enhancing overall system stability.

References